WDACPolicies icon indicating copy to clipboard operation
WDACPolicies copied to clipboard

Published 20 hours ago • verified publisher icon mattifestation

Detect resource-only dll's

Open kimoppalfens opened this issue 1 year ago • 1 comments

Hi Matt,

Have a question around a remark in the VMWare Tools policy markdown.

Exclude *ver.dll DLLs. These are not signed but they are resource-only DLLs

How do you determine a DLL is a resource-only DLL? Are there any tools available that can help in this process?

Kim

kimoppalfens avatar Aug 22 '23 08:08 kimoppalfens

I think its best guess. You can install vs 2022 community edition and select the c++ profiling tools to get dumpbin. Then using /headers and /exports you can see if the output shows it exports functions or contains any code. Try with vmware tools and see, i dont have access to those binaries.

screamtracker avatar May 07 '24 18:05 screamtracker